Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: option to disable (def) HTTP2 for servers #53

Merged
merged 1 commit into from
Jun 12, 2024
Merged

feat: option to disable (def) HTTP2 for servers #53

merged 1 commit into from
Jun 12, 2024

Conversation

mikouaj
Copy link
Member

@mikouaj mikouaj commented Jun 12, 2024

The HTTP2 for webhook and secure metrics servers will be disabled by default due to the HTTP/2 Stream Cancellation and
Rapid Reset CVEs:

HTTP2 can be enabled by setting HTTP2=true env variable.

@mikouaj mikouaj merged commit ad27fa9 into main Jun 12, 2024
4 checks passed
@mikouaj mikouaj deleted the http2conf branch June 12, 2024 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant